lib: disallow file-backed blob cloning

Disallow cloning of file-backed Blobs. If necessary, we can enable
this later but for now we disable it. The reason is because the
underlying FdEntry ends up bound to the Environment/Realm under
which is was created and transfering across worker threads ends up
failing.
Fixes: #47334
PR-URL: #47574
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: jasnell

lib/internal/blob.js

@@ -56,6 +56,7 @@ const {
 ERR_INVALID_ARG_TYPE,
 ERR_INVALID_ARG_VALUE,
 ERR_INVALID_THIS,
+ERR_INVALID_STATE,
 ERR_BUFFER_TOO_LARGE,
 },
 }=require('internal/errors');
@@ -74,6 +75,7 @@ const { queueMicrotask } = require('internal/process/task_queues');
 constkHandle=Symbol('kHandle');
 constkType=Symbol('kType');
 constkLength=Symbol('kLength');
+constkNotCloneable=Symbol('kNotCloneable');
 
 constdisallowedTypeCharacters=/[^\u{0020}-\u{007E}]/u;
 
@@ -186,6 +188,11 @@ class Blob {
 }
 
 [kClone](){
+if(this[kNotCloneable]){
+// We do not currently allow file-backed Blobs to be cloned or passed across
+// worker threads.
+thrownewERR_INVALID_STATE.TypeError('File-backed Blobs are not cloneable');
+}
 consthandle=this[kHandle];
 consttype=this[kType];
 constlength=this[kLength];
@@ -438,7 +445,9 @@ function createBlobFromFilePath(path, options) {
 returnlazyDOMException('The blob could not be read','NotReadableError');
 }
 const{0: blob,1: length}=maybeBlob;
-returncreateBlob(blob,length,options?.type);
+constres=createBlob(blob,length,options?.type);
+res[kNotCloneable]=true;
+returnres;
 }
 
 module.exports={

test/parallel/test-blob-file-backed.js

@@ -4,6 +4,7 @@ const common = require('../common');
 const{
  strictEqual,
  rejects,
+ throws,
 }=require('assert');
 const{ TextDecoder }=require('util');
 const{
@@ -99,3 +100,14 @@ writeFileSync(testfile3, '');
 constreader=stream.getReader();
 awaitrejects(()=>reader.read(),{name: 'NotReadableError'});
 })().then(common.mustCall());
+
+(async()=>{
+// We currently do not allow File-backed blobs to be cloned or transfered
+// across worker threads. This is largely because the underlying FdEntry
+// is bound to the Environment/Realm under which is was created.
+constblob=awaitopenAsBlob(__filename);
+throws(()=>structuredClone(blob),{
+code: 'ERR_INVALID_STATE',
+message: 'Invalid state: File-backed Blobs are not cloneable'
+});
+})().then(common.mustCall());